OAuth Consent Phishing
The message or a page it leads to asks you to approve an app's access to your account on a real sign-in provider's permission screen. An approved app can keep that access without needing your password.
Also known as
- Aliases
-
- illicit consent grant
- OAuth phishing
- consent phishing
- Broader terms
-
- Steal Application Access Token
Mapped to
MITRE ATT&CK®